Offensive Internet of Things Exploitation
Overview
IoT or the Internet of Things is one of the most upcoming trends in technology as of now. A lot many new devices are coming up every single month. However, not much attention has been paid to the device's security till now. "Offensive IoT Exploitation" is a brand new and unique course which offers pentesters the ability to assess and exploit the security of these smart devices.
The training will cover different varieties of IoT devices, assessing their attack surfaces and writing exploits for them. The 2-day class will be hands-on giving attendees the ability to try things themselves rather than just watching the slides. We will start from the very beginning discussing about the architecture of IoT devices, and then slowly moving to firmware analysis, identifying attack surface, finding vulnerabilities and then finally exploiting the vulnerabilities.
The course labs include both emulated environments as well as real live devices which will be provided to the attendees during the training. Offensive IoT Exploitation training is designed for pentesters who want to kickstart their career in IoT Pentesting and the training does not expect the attendees to have a prior knowledge of assembly, mobile security or reversing. The attendees will be provided with VM image for IoT security testing platform called Drona created by the trainers themselves. Custom VM - codenamed Drona created by the trainers will be used for the entire class. After the 2-days class, the attendees will be able to:
- Extract and analyze device firmwares
- Analysis using IDA pro
- ARM Architecture and Reversing
- MIPS Architecture and Reversing
- Get familiar with UART, SPI and JTAGs
- Hardware and Software Debugging
- Identify attack surfaces and write fuzzers
- Device Scanning
- Specific Web and Mobile based vulnerabilities
- USB Attacks
- Familiarity with NFC, Bluetooth, RFID
- Write exploits for the platforms
- Bypass security mitigations
- Introduction to Radio protocols
Offensive IoT Exploitation is the course for you if you want to try exploitation on new hardwares and find security vulnerabilities and 0-days in IoT devices. At the end of the class, there will be a final CTF challenge where the attendees will have to identify security vulnerabilities and exploit them, in a completely unknown device.
Who Should Take this Course
- IoT Security Enthusiasts
- Web/Mobile Pentesters
- Embedded Developers
Student Requirements
- Basic knowledge of web and mobile security
- Linux Familiarity
What Students Should Bring
- Laptop with at least 25 GB free space
- 4 GB minimum RAM (Anything less won't be able to run the IoT pentesting VM)
- External USB access
- Administrative privileges on the system
- Virtualization software
What Students Will Be Provided With
- IoT devices Custom IoT pentesting VM - Codename Drona
- Lab reference material and handouts
- 400+ slides (PDF Copy)
Trainers
Aditya Gupta (@adi1391) is the founder and principal consultant of Attify (attify.com ) , an IoT and Mobile security firm. He has done a lot of in-depth research on Mobile application security and IoT device Exploitation. He is also the creator of AppWatch (https://appwatch.io) - an automated platform for Mobile Security Analysis. He is also the author of the popular Android security book "Learning Pentesting for Android Devices" selling over 10000+ copies, since the time of launch in March 2014. He has also discovered serious web application security flaws in websites such as Google, Facebook, PayPal, Apple, Microsoft, Adobe, Skype, and many more. He has also published a research paper on ARM Exploitation titled "A Short Guide on ARM Exploitation." In his previous roles, he has worked on security of mobile devices, apps, networks, developing automated internal tools to prevent fraud, finding and exploiting vulnerabilities and so on. He currently researches on Internet of Things and "smart" devices security research and identifying new vulnerabilities in the devices and standards. He is also a frequent speaker and trainer at numerous international security conferences including Black Hat, Syscan, OWASP AppSec, PhDays, Brucon, Toorcon, Clubhack etc, and also provides private training for organisations for developers and red teams all over the world.
Aseem Jakhar is the Director, research at Payatu Software Labs payatu.com a boutique security testing company. He is well known in the hacking and security community as the founder of null -The open security community, registered not-for-profit organization http://null.co.in and also the founder of nullcon security conference nullcon.net and hardwear.io security conferencehttp://hardwear.io He has extensive experience in system programming, security research, consulting and managing security software development projects. He has worked on various security software including UTM appliances, messaging/security appliances, anti-spam engine, anti-virus software, multicast packet reflector, Transparent HTTPS proxy with captive portal, bayesian spam filter to name a few. He currently spends his time researching on IoT security and hacking things. He is an active speaker and trainer at security and open source conferences; some of the conferences he has spoken at include AusCERT, Defcon, Hack.lu, Black Hat, Brucon, PHDays and many more. His research includes Linux remote thread injection, automated web application detection and dynamic web filter. He is the author of open source Linux thread injection kit -Jugaad and Indroid which demonstrate a stealthy in-memory malware infection technique.
